Global alert over two critical PHP flaws forces government websites offline

The flaws, tracked as CVE-2026-109618 and CVE-2026-109619, carry a severity score of 9.2 out of 10 and affect all PHP installations serving web requests Governments and companies in several countries temporarily took websites offline this week over two critical vulnerabilities in PHP, the programming language that powers much of the internet, which allow an attacker to run code remotely on servers without authenticating. PHP’s development team released fixes on Wednesday and urged users to update immediately.

Espace publicitaire · 300×250